Remediation Scripts

RealmJoin's managed, continuously updated Intune remediation scripts that detect and fix issues on Windows clients.

Overview

Intune remediation scripts allow you to report and react to problems on your managed Windows clients using scripts.

RealmJoin Portal allows you to review Intune remediation scripts in your environment. Additionally, RealmJoin hosts a set of managed and constantly updated scripts for you to use in GitHub.

Remediation Script List

Remediation Script List

The Remediation Script List shows you all existing and available remediation scripts for your environment.

Search and Sort

You can search for scripts by Author, Status or Name. The search will update as you type.

You can sort by most fields by clicking on the fields' header (name).

Filters

Use filters to limit the items displayed by state

• Any (default) - Show all existing and available remediation scripts
• Managed - Show all remediation scripts managed by RealmJoin. Available (a.k.a. "not staged"), staged and deployed.
• Staged - Show only managed remediation scripts that have been imported into your Intune instance but not assigned to users/devices.
• Deployed - Show only managed remediation scripts that are assigned to users/devices.

Remediation Script Details

When you click on a script's name, you can review a script's details, statistics and its stage, as well as deploy or remove managed scripts in your environment.

On the left side of the page, you will see metadata about the script, incl. flags such as if the scripts need to be executed on 32bit on a 64bit host.

Remediation Script Details

Be aware, details can vary. For example, only scripts already staged/existing in your tenant can have a "last modified" date.

The right half of the page is split up into multiple tabs.

• Overview - Basic information about the script
• Detection Script Source - See the PowerShell Source of the detection script.
• Remediation Script Source - See the PowerShell Source of the remediation script (which is optional).

Other tabs and UI elements depend on the state of the script package.

Custom scripts

• Assignments - For scripts that you created outside of RealmJoin, you can review (but not change) the scripts' assignments to users and groups. This will also show the schedule for the detection script execution.

Custom Script Assignments

• Statistics - Show execution and device statistics for the script

Script Statistics

Managed Scripts

Not staged

If a managed script is not staged yet (i.e. does not exist in your Intune instance yet), RealmJoin Portal will offer a button to Stage the script in your environment.

This will make the script available for assignment, but not have any effect on your devices yet.

Stage a Managed Script

Staged and Deployed

Managed Scripts that exist in your environment show the same information as other (custom) scripts in your environment like existing assignments and statistics, see Custom Scripts.

Removal

Staged and deployed managed scripts can be removed from Intune using the More -> Delete button.

Delete a Managed Script

Deleting a managed script will also remove its Managed Groups (if such exist).

Assignment

You can assign managed scripts to users and devices in the Assignments tab, create managed groups or use your existing groups for assignments. You can also exclude groups from the assignment.

Assign Managed Scrips

When assigning a staged script, its status will change to deployed. At this point it can affect clients and users.

You can use Assign to All Users and Assign to All Devices to use Intune's default assignment targets for this script. This will show a dialogue to define the desired schedule for evaluation (detection):

Script Schedule Editor

Managed Groups

Alternatively, you can Create Managed Groups to create Entra Groups that will be assigned instead of "All Devices" or "All Users".

Managed Groups

The naming scheme for Managed Groups can be defined in Settings -> General.

When updates for the managed remediation script become available, RealmJoin will make sure that these groups will be assigned to the update remediation script.

You can use change schedule to open the Script Schedule Editor for this assignment.